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CONTROLLING ACCESS TO CONTENT 

TECHNICAL FIELD 
This invention relates to controlling access to content. 

BACKGROUND 

The Internet and other computer networks can provide users with a wealth of 
5 information on almost any topic. Some of this information, however, includes material that 
may be offensive and/or unsuitable for children. Organizations such as the Recreational 
Software Advisory Council (RSAC) have proposed rating schemes that provide users with 
information about the nature of content offered by different network sites. The RSAC rating 
scheme defines categories for describing the violence, nudity, sex, and offensive language 
10 included in content. Different vendors such as MICROSOFT have integrated the RSAC 
scheme into their software to enable users to control the content displayed. For example, a 
parent may configure a browser to deny access to any content having a RSAC nudity rating 
above "revealing attire." These parental controls enable parents to prevent their children 
from viewing mature subject matter. 

15 SUMMARY 

In one general aspect, controlling access to requested content includes 
accessing information describing requested content, accessing information describing at least 
one regulation that is related to the requested content and to geographical information, and 
determining whether the content information satisfies the regulation(s). 

20 Embodiments may include one or more of the following features. For 

example, access to the requested content may be denied if the content information is 
determined not to satisfy the applicable regulation(s), and may be permitted if the content 
information is determined to satisfy the applicable regulation(s). 

The information describing the content may be content ratings. For example, 

25 the content ratings may include data corresponding to one or more of violence, nudity, sex, 
and language. The content ratings may be substantially in accordance with the Recreational 
Software Advisory Council (RSAC) ratings scheme. 

- 1 - 
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Accessing information describing the content may include accessing a 
database that includes infomiation for different content. Accessing information may also 
include accessing content information in a response to the content request. 

One or more regulations related to the requested content may be determined. 
This may include inferring the citizenship of a user that requested the content, for example, 
by accessing the user's billing address and/or determining an access number used by the user. 

The regulation may be a national regulation, an international regulation, 
and/or a local regulation such as a law, an ordinance, a rule, a treaty, a proclamation, or an 
edict. The regulation may be a regulation that applies to citizens within a jurisdiction, to 
citizens outside a jurisdiction, and/or to non-citizens within a jurisdiction. 

The content can include text, graphics, animations, sound, video, and 
instructions. The content may be, for example, HTML (HyperText Markup Language) 
instructions, XML (Extensible Markup Language) instructions, or MPEG (Moving Pictures 
Experts Group) data. 

Determining whether the information describing the requested content 
satisfies the regulation(s) may include determining that the content information satisfies all of 
the regulations. 

When a request for the content is received, for example, at a proxy, an 
indication that access has been denied may be provided if the content does not satisfy the 
applicable regulation(s). 

In another general aspect, access to requested content available on the Internet 
is controlled by receiving a request for content, accessing content ratings describing the 
requested content, accessing information describing at least one applicable regulation that is 
related to geographical information concerning the requestor, determining whether the 
content information satisfies the regulation(s), denying access to the requested content if the 
content information is determined not to satisfy the regulation(s), and permitting access to the 
requested content if the content information is determined to satisfy the regulation(s). 

The invention may be implemented as a computer program, disposed on a 
computer-readable medium, for controlling access to requested content. 

Advantages may include one or more of the following. By controlling access 
to content based on one or more applicable regulations, a system can protect both an end-user 
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and a common carrier from liability for viewing or transmitting prohibited content. Even in 
countries where common carriers are exempted from liability, use of the system to self- 
regulate the content offered by the carrier can make the carrier more appealing to 
governments, for example, when seeking permission to operate in a jurisdiction. By using an 
5 established content ratings scheme, the system can be incorporated easily into software that 
already provides parental controls to thereby take advantage of the ratings already 
determined for a large body of content. By centralizing regulation-based controls in a proxy 
or other intermediate agent, the proxy can prevent users from disabling the controls, further 
protecting both the users and the common carrier. 
10 Other features and advantages of the invention will be apparent from the description 

and drawings, and from the claims. 

DESCRIPTION OF DRAWINGS 
FIG. 1 is a screenshot of a list of URLs (Universal Resource Locators) 
provided by a search engine. 
15 FIG. 2 is a screenshot of a display indicating that access to requested content 

has been denied based on applicable regulations. 

FIG. 3 is a flowchart of a process for controlling access to requested content 
based on one or more regulations. 

FIG. 4 is a table of categories and category levels for describing content. 
20 FIG. 5 is a diagram of data describing content. 

FIG. 6 is a flowchart of a process for determining regulations that apply to a 
content request. 

FIG. 7 is a table of regulations. 

FIG. 8 is a diagram of a proxy that processes client requests for content. 
25 FIG. 9 is a diagram of a client that denies access to requested content based on 

one or more regulations. 

Like reference numbers and designations in the various drawings indicate like 

elements. 
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DETAILED DESCRIPTION 

Many different countries regulate the content of material that is provided for 
viewing or that is transmitted. For example, Japan prohibits transmission of material that 
includes fiill frontal nudity. Similariy, Germany prohibits its citizens from accessing material 
5 that includes pro-Nazi sentiments. Saudi Arabia prohibits material including nudity within 
its borders, and also prohibits its citizens from viewing such material when traveling to other 
countries. Regulation of materials is not limited to national jurisdictions. For example, in 
the United States, different county and state representatives have argued for local regulation 
of access to obscene material. 

10 FIGS. 1 and 2 illustrate a system that denies a user access to content that does 

not comply with applicable regulations. Such content can include text, graphics, animations, 
video, sound, and instructions. The content can be embodied in a wide variety of formats 
such as HTML (HyperText Markup Language), XML (Extensible Markup Language), or 
MPEG (Moving Pictures Experts Group). 

15 As shown in FIG. 1 , a search engine has produced a list of URLs (Universal 

Resource Locators) that include information corresponding to a search engine query of 
"asexual reproduction." URL 100 corresponds to a resource that provides content related to 
nude beaches. As shown, in FIG. 2, when a Saudi Arabian citizen attempts to retrieve the 
nude beach URL 100 content from the network site, the system denies access based on Saudi 

20 Arabian regulations that prohibit Saudi Arabian citizens from viewing content that includes 
nudity. The system provides a display explaining that regulations (e.g., laws, treaties, rules, 
ordinances, proclamations, or edicts) caused the system to deny access. 

The system protects from liability both the citizen attempting to access the 
content and the carrier transmitting the content. Additionally, even in countries where 

25 carriers do not have a duty to monitor content, the use of the system by a carrier to self- 
regulate the content that the carrier provides can increase the carrier^s appeal to a 
government, for example, when the carrier seeks permission to provide services within a 
country. 

FIG. 3 illustrates a process 102 for controlling access to content based on 
30 regulations. Process 1 02 includes determining the nature (e.g., the degree of violence or 
nudity) of the requested content (step 104), determining regulations (e.g., state, county, 
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national, or international regulations) that apply to the request (step 106), comparing the 
nature of the requested content with the restrictions imposed by the applicable regulations 
(step 108), providing access to the content if the content meets the applicable regulations 
(step 110), and denying access to the content 1 12, in whole or in part, if the content fails to 
5 meet these regxilations (step 1 12). For example, the process 1 02 may determine the nature of 
the requested content as described with respect to FIGS. 4 and 5, may impute or obtain the 
nationality of the requesting user, and may use the nationality to access encoded 
representations of that nation*s regulations, as described with respect to FIGS. 6 and 7, 

Specifically, referring to FIG. 4, step 104 may include inferring the nature of 

10 the requested content from search terms, from metatags associated with search results, from 
lists or services maintained to categorize requests, or otherwise. For example, the 
Recreational Software Advisory Council (RSAC) rating scheme 120 includes categories 122- 
128 (e.g., violence, nudity, sex, and langxxage) and category levels 130-138 (e.g., zero to 
four). The scheme can be used to describe content by assigning the content a level 130-138 

15 for each category 122-128. Referring to FIG. 5, a network site and its ratings are shown at 
140. The network site, shown as "www.sex.com", is rated in accordance with the RSAC 
scheme including level data for each RSAC category. The rating shown indicates that the 
network site 142 does not portray any violence 144 (i.e., level "0" 138 of the violence 
category 122), but does include "provocative displays" 146 (i.e., level "4" 130 of the nudity 

20 category 124), "explicit sexual acts" 148 (e.g., level "4" 130 of the sex category 126), and 
"vulgar language" 150 (e.g., level "4" 130 of the language category 128). One or more 
additional categories may be available for other forms of rating. 

The content need not be described in accordance with the RSAC ratings 
scheme or any other existing ratings scheme. The ratings scheme used may depend on the 

25 common carrier's preference. The use of an established scheme, however, enables the system 
to use a large existing body of content ratings. Using the RSAC scheme also permits easy 
modification of software that implements parental controls to also implement regulation- 
based controls. Preferably, software that enables a user to disable parental controls does not 
permit the user to disable regulation-based controls. 

30 Content rating can be performed in many different ways. For example, an 

organization may have a human operator retrieve infomnation from different network 
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resources and rate the retrieved information. Alternatively, a program may examine content 
and automatically determine ratings based on the inclusion of information (e.g., words) 
associated with different categories. Content ratings can be collected and stored in databases. 
Such databases can be centralized or distributed across different computers. Alternatively, 
5 content ratings can be stored at network sites providing the rated content. These sites can 

transmit the ratings along with the requested content and let the client or an intervening agent 
process the ratings. 

Referring to FIG. 6, determining applicable regulations (step 106) can include 
determining the citizenship of a user, for example, by examining a user's billing address or by 

10 accessing data such as a user's self-reported citizenship (step 114). Determining applicable 
regulations 106 can also or alternatively include determining the current location of a user, 
for example, by determining the access number dialed by a user to connect to a service 
provider (step 1 16). Based on this information, the system can determine the applicable 
regulation(s) by, for example, consulting a look-up table (step 118). 

15 Referring to FIG, 7, an exemplary look-up table 129 that is used, e.g., in step 

118 of FIG. 6, stores encoded representations of regulations of different national, 
international, and local entities. As shown, the table includes regulations encoded in 
accordance with the RSAC ratings scheme. The table expresses a regulation as the 
maximum level, or threshold, of permissible content in each of the RSAC categories 1 60- 

20 1 68. If a content's category rating exceeds a regulation's category threshold, the content does 
not meet the regulation. For example, a regulation specifying that content having more than 
"moderate expletives" (level 2 of the RSAC language category) effectively prohibits access 
to content including "strong language or hate speech" (level 3 of the RSAC language 
category). The regulation would also prohibit access to "crude or vulgar language" (level 4 

25 of the RSAC language category). 

The table 129 can include multiple rows for each jurisdiction to encode 
different types of regulations (e.g., 170-178). For example, the table 129 can store 
regulations that independently govern citizens requesting content within a jurisdiction (e.g., 
170) and citizens requesting the content outside the jurisdiction (e.g., 172). Further, other 

30 regulations can independently regulate access by non-citizens requesting content within the 
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jurisdiction (e.g., 174) and non-citizens requesting content outside the jurisdiction (not 
shown). 

By comparing the ratings for requested content with one or more applicable 
regulations, the system can determine whether to deny or grant access to the content. For 
6 example, if a U.S. citizen requested content from "www.sex.com" (FIG. 5) from a computer 
in the U.S., the system would deny access because the level of sex in the requested content 
(i.e., level "4" in FIG. 5) exceeds the maximum level of sex 138 (i.e., level "3" in FIG. 7) 
permitted in the United States. In this example, if the U.S. citizen made the same request 
while in another country, the U.S. regulations 146 for citizens abroad would not result in 

10 denied access because the level of sex permitted in the other country is "4", the same as the 
level of sex in the requested content. 

Regulations of more than one jurisdiction or entity may apply to a request for 
content. The system can process the different regulations to ensure the content satisfies all 
applicable regulations. For example, two regulations 176, 178 may apply to a German 

15 citizen traveling to Japan. The system ensures that requested content satisfies both 

regulations 176, 178. If the traveler requested the content of FIG- 6, the system would deny 
access either on the basis that such access would violate Japan's regulations because the 
content includes nudity more excessive than "partial nudity" (e.g., level "2" of the nudity 
category 162) or on the basis that such access would violate Germany's regulations because 

20 the content may include hate speech (e.g., content more excessive than level "2" of the 
language category 166). 

Referring to FIG. 8, the techniques described above can be incorporated into a 
proxy 184 or other intermediate agent that processes content requests. For example, the 
techniques can be offered by an Intemet Service Provider, 

25 As shown in FIG. 8, a proxy 1 84 processes content requests received from a 

client 180 via a modem 1 82 or other communication device by forwarding content requests 
to content sources 186 (e.g., Intemet Web-servers) and returning the responses of the content 
source 186. As shown, the different elements can reside in different jurisdictions 188, 190. 
By including regulation instructions 192 in the processing performed by the proxy 184, the 

30 proxy 184 can ensure that information that is returned in response to a content request 

complies with applicable regulations. By centralizing regulation-based controls in a proxy 
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1 84 or other intermediate agent, the user may be denied the ability to disable the controls, 
further protecting both the user and the common carrier. 

As shown, the regulation instructions 192 can access regulation data 194 (e.g., 
the table of FIG. 7), user data such as billing information 196, and content ratings 198 data or 
5 instructions. The content ratings 198 may include a table that collects ratings of content 
available from different content sources 186, e.g., a table including several records such as 
that shown by FIG. 5. 

When the proxy 184 receives a content request or response, the proxy 1 84 can 
determine regulations applicable to the requesting user based, for example, on the user's 

10 citizenship or access location and the ratings corresponding to the requested content in the 
content ratings data 198. If the content does not comply with applicable regulations, the 
proxy 1 84 can return information (e.g., HTML instructions and data) indicating that the 
proxy 1 84 is not transmitting the requested content due to content regulations. 

FIG. 8 is merely illustrative and other embodiments could implement the 

15 system differently or could add or omit elements. For example, instead of storing content 
ratings data 198, the proxy 184 could receive content ratings in data supplied by a content 
source 1 86 responding to a request. Additionally, the system could dynamically determine 
the nature of requested content using software that examines the content. Further, the system 
need not store user data 196, but could instead infer citizenship information based on the 

20 access location of the modem 1 82 or other communication device used by the client 1 80. 

Referring to FIG. 9, the techniques described above are not limited to use in a 
proxy or other intermediate agent, but instead could reside in the client 1 80. As shown, the 
regulation instructions 192 access regulation data 194 and user data 196. The regulation data 
1 94 may or may not be much more limited in scope or volume than the comprehensive list of 

25 regulations shown in FIG. 7. For example, an American client may only include regulations 
that apply to U.S. citizens. Additionally, user data 196 need not be stored, but can be 
dynamically obtained, for example, by querying an operating system registry. When the 
client 180 receives a response to a content request, the regulation instructions 192 can 
prevent presentation of information that does not comply with applicable regulations. 

30 The methods and techniques described here may be implemented in digital 

electronic circuitry, or in computer hardware, firmware, software, or in combinations of 
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them. Apparatus embodying these techniques may include appropriate input and output 
devices, a computer processor, and a computer program product tangibly embodied in a 
machine-readable storage device for execution by a programmable processor. A process 
embodying these techniques may be performed by a programmable processor executing a 

5 program of instructions to perform desired functions by operating on input data and 

generating appropriate output. The techniques may advantageously be implemented in one 
or more computer programs that are executable on a programmable system including at least 
one programmable processor coupled to receive data and instructions from, and to transmit 
data and instructions to, a data storage system, at least one input device, and at least one 

10 output device. Each computer program may be implemented in a high-level procedural or 
object-oriented programming language, or in assembly or machine language if desired; and 
in any case, the language may be a compiled or interpreted language. Suitable processors 
include, by way of example, both general and special purpose microprocessors. Generally, a 
processor will receive instructions and data from a read-only memory and/or a random access 

15 memory. Storage devices suitable for tangibly embodying computer program instructions 
and data include all forms of non-volatile memory, including by way of example 
semiconductor memory devices, such as EPROM, EEPROM, and flash memory devices; 
magnetic disks such as internal hard disks and removable disks; magneto-optical disks; and 
CD-ROM disks. Any of the foregoing may be supplemented by, or incorporated in, 

20 specially-designed ASICs (application-specific integrated circuits). 

A number of embodiments of the present invention have been described. 
Nevertheless, it will be understood that various modifications may be made without 
departing from the spfrit and scope of the invention. For example, the distribution of the 
fiinctions and components need not be as shown in the embodiments of FIGS. 8 or 9, but can 

25 instead be distributed over any number of computers or networks. Accordingly, other 
embodiments are within the scope of the following claims. 
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WHAT IS CLAIMED IS: 



1 1 . A method of controlling access to content, the method comprising: 

2 accessing content information describing requested content; 

3 accessing regulation information describing at least one regulation that is related to 

4 the requested content and to geographical information; and 

5 determining whether the content information satisfies the at least one regulation, 

1 2. The method of claim 1, further comprising denying access to the requested content 

2 if the content infomiation is determined not to satisfy the at least one regulation. 

1 3. The method of claim 1, further comprising pemiitting access to the requested 

2 content if the content information is determined to satisfy the at least one regulation. 

1 4. The method of claim 1, wherein the content information comprises content ratings 

2 such that the accessing of the content information includes accessing content ratings. 

1 5. The method of claim 4, wherein the content ratings comprise data corresponding 

2 to one or more of violence, nudity, sex, and language such that the accessing of the content 

3 information includes accessing data corresponding to one or more of violence, nudity, sex, 

4 and language. 

1 6. The method of claim 1, wherein the accessing of the content information 

2 comprises accessing a database that includes information for different content. 

1 7. The method of claim 1, further comprising receiving a content request, wherein 

2 the accessing of the content information comprises accessing information included in a 

3 response to the content request. 

1 8. The method of claim 1, wherein the accessing of the regulation infomiation 

2 comprises determining one or more regulations related to the requested content. 
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1 9. The method of claim 1, further comprising receiving a content request, wherein 

2 the accessing of the regulation information comprises accessing inforaiation that relates to a 

3 user from whom the content request is received. 

1 10. The method of claim 9, wherein determining which of the one or more 

2 regulations that apply comprises determining the citizenship of a user that requested the 

3 content. 

1 11. The method of claim 1 0, wherein the determining of the citizenship comprises 

2 accessing a billing address for a user from whom the content request is received. 

1 12. The method of claim 9, wherein the determining which of the regulations apply 

2 comprises determining an access number used by a user from whom the content request is 

3 received. 

1 13, The method of claim 1 , wherein the accessing of the regulation information 

2 includes accessing one or more of a national regulation, an international regulation, and a 

3 local regulation. 

1 14. The method of claim 1 , wherein the accessing of the regulation information 

2 includes accessing one or more of a law, an ordinance, a rule, a treaty, a proclamation, and an 

3 edict. 

1 15. The method of claim 1, wherein the accessing of the regulation information 

2 mcludes accessmg a regulation that applies to citizens within a jurisdiction. 

1 16. The method of claim 1, wherein the accessing of the regulation information 

2 includes accessing a regulation that applies to citizens outside a jurisdiction. 

1 1 7. The method of claim 1 , wherein the accessing of the regulation information 

2 includes accessing a regulation that applies to non-citizens within a jurisdiction. 
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1 18. The method of claim 1, wherein the accessing of the content infomiation 

2 comprises accessing one or more of text, graphics, animations, sound, video, and 

3 instructions. 

1 19. The method of claim 1 , wherein the accessing of the content information 

2 comprises accessing one or more of HyperText Markup Language instructions, Extensible 

3 Markup Language instructions, and Moving Pictures Experts Group data. 

1 20. The method of claim 1, wherein the determining of whether the information 

2 describing the requested content satisfies the at least one regulation comprises determining 

3 that the content information satisfies all of the at least one regulations. 

1 21 . The method of claim 1, further comprising receiving a request for the requested 

2 content. 

1 22. The method of claim 21 , wherein receiving the request comprises receiving the 

2 request at a proxy. 

1 23. The method of claim 1, further comprising providing an indication that access 

2 has been denied if the content information does not satisfy the regulation. 

1 24. A method of controlling access to requested content available on the Internet, the 

2 method comprising: 

3 receiving a request for content; 

4 accessing content ratings describing the requested content; 

5 accessing information describing at least one regulation that is related to geographical 

6 information concerning the requestor; 

7 determining whether the content information satisfies the at least one regulation; 

8 denying access to the requested content if the content information is determined not 

9 to satisfy the at least one regulation; and 
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10 permitting access to the requested content if the content information is determined to 

1 1 satisfy the at least one regulation. 

1 25. A computer program, disposed on a computer-readable medium, for controlling 

2 access to requested content, the computer program including instructions for causing a 

3 processor to: 

4 access content information describing requested content; 

5 access regulation information describing at least one regulation that is related to the 

6 requested content and to geographical information; and 

7 determine whether the content information satisfies the at least one regulation. 

1 26. The computer program of claim 25, further comprising instructions for causing 

2 the processor to deny access to the requested content if the content information is determined 

3 not to satisfy the regulation. 

1 27. The computer program of claim 25, wherein the content information comprises 

2 content ratings. 

1 28. The computer program of claim 25, wherein the instructions for causing the 

2 processor to determine which of the one or more regulations that apply include instructions 

3 for causing the processor to determine a citizenship of a user that requested the content. 

1 29. The computer program of claim 25, further comprising instructions for causing a 

2 processor to receive a request for the content. 
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